They are probably not explicitly lying about what information they retain. If they say they deleted it, well, it's probably at least inaccessible to production systems.